Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1474adc7-0110-3bbb-bdc5-573a6aceda12.roa
File: 1474adc7-0110-3bbb-bdc5-573a6aceda12.roa (raw, json)
Hash identifier: OxRODmfcHcfAVkClglWomLhcySxM/VeCjglHBqP3XCU=
Subject key identifier: C3:35:50:32:17:04:BA:A6:22:5E:CE:EF:21:7E:D1:44:7A:0C:39:BF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584553330A9F22A10446782C4900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1474adc7-0110-3bbb-bdc5-573a6aceda12.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 162.40.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:0a:9f:22:a1:04:46:78:2c:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=394c44d9-88be-40a6-aa20-b7f7091a4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:ca:bc:42:0b:df:db:ba:6e:78:8d:52:a3:
b3:60:5b:12:1f:c7:07:75:d3:b6:54:3b:ac:72:3e:
06:1e:c2:3a:34:06:82:13:68:f7:c1:67:91:90:d3:
78:19:a3:cc:5d:08:e2:33:96:41:85:70:e7:85:f4:
70:f3:12:67:96:97:d5:06:1b:55:f7:cd:4a:78:a6:
6a:44:c5:e3:52:16:07:0b:36:15:da:0a:4d:4e:ba:
7a:d9:91:63:3c:bf:6f:80:b7:83:ff:ba:07:07:c6:
3f:69:76:2e:69:96:7e:82:46:3c:89:84:91:03:dc:
6e:ae:21:31:3a:30:db:3b:25:a5:f4:f2:63:0a:35:
54:89:29:a8:8b:33:d7:25:40:7a:de:f1:06:94:d2:
6f:73:fa:7e:06:7f:38:e5:6b:41:84:55:d7:03:04:
65:16:80:7a:55:cc:6c:18:79:97:4c:30:92:42:93:
02:99:1f:0f:2f:9c:5f:70:76:c1:cf:6b:81:80:bc:
ab:54:c5:76:25:44:7a:92:dd:d7:43:16:b8:ca:fc:
0f:e1:88:23:ee:6e:4b:82:1f:04:f3:c0:53:66:c4:
cf:3a:31:6b:89:8d:4e:67:90:15:f5:07:78:c5:13:
20:60:42:44:10:3f:6d:df:c5:39:bb:4f:4f:ba:b6:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:50:32:17:04:BA:A6:22:5E:CE:EF:21:7E:D1:44:7A:0C:39:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1474adc7-0110-3bbb-bdc5-573a6aceda12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:41:82:8a:6e:b4:83:f9:2e:43:0b:a0:01:0c:c3:9d:62:a9:
d0:8d:98:38:03:9b:ff:34:34:43:56:a2:b2:c6:70:be:48:01:
ed:c6:be:4b:cf:7d:f0:a8:65:ef:01:ed:fd:15:44:d5:01:51:
29:e7:54:8c:58:06:e9:6d:da:93:0e:90:7a:2b:ae:91:30:b0:
e9:d6:17:58:cc:b8:84:b9:29:03:87:6d:c3:94:19:79:a1:b2:
d9:b0:22:a0:0a:88:ed:7d:62:68:94:6b:2b:22:8c:bb:7c:82:
71:8c:a8:73:8a:cf:a2:5e:37:b6:f4:97:ce:de:67:29:77:15:
ed:16:76:66:d3:23:41:f3:35:c1:74:0f:61:fa:fc:9d:c1:40:
d9:ed:37:60:07:ba:2d:5e:e3:9a:43:49:42:90:43:b9:ae:6d:
ea:0d:3c:e3:a6:3b:d0:0f:d5:dc:b5:8c:af:89:de:ae:84:4a:
56:39:cf:78:6a:47:69:56:a8:4f:a9:5d:3d:0f:e1:ca:5d:b4:
87:5f:b5:bf:89:a3:ef:46:1a:42:40:62:66:26:e9:ab:16:93:
e1:ad:74:b3:19:62:6e:db:f2:90:d2:0b:7f:b0:b4:f2:38:70:
25:7a:c8:d4:04:b6:1d:b8:96:de:b7:e6:c5:60:5c:ce:17:a3:
7e:7d:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:54:07 2025 by rpki-client